1. Forum
  2. Usenet
  3. LINUX.GENTOO.ANNOUNCE

  • [gentoo-announce] [ GLSA 202506-05 ] GTK+ 3: Search path vulnerability

    From glsamaker@gentoo.org@21:1/5 to All on Thu Jun 12 09:40:01 2025
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Gentoo Linux Security Advisory GLSA 202506-05
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    https://security.gentoo.org/
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Severity: High
    Title: GTK+ 3: Search path vulnerability
    Date: June 12, 2025
    Bugs: #949825
    ID: 202506-05

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Synopsis
    ========

    A vulnerability has been discovered in Gtk+, which can lead to arbitrary
    code execution.

    Background
    ==========

    GTK+ (GIMP Toolkit +) is a toolkit for creating graphical user
    interfaces.

    Affected packages
    =================

    Package Vulnerable Unaffected
    ------------- ------------ ------------
    x11-libs/gtk+ < 3.24.48 >= 3.24.48

    Description
    ===========

    A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details.

    Impact
    ======

    Please review the referenced CVE identifier for details.

    Workaround
    ==========

    There is no known workaround at this time.

    Resolution
    ==========

    All GTK+ 3 users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=x11-libs/gtk+-3.24.48"

    References
    ==========

    [ 1 ] CVE-2024-6655
    https://nvd.nist.gov/vuln/detail/CVE-2024-6655

    Availability
    ============

    This GLSA and any updates to it are available for viewing at
    the Gentoo Security Website:

    https://security.gentoo.org/glsa/202506-05

    Concerns?
    =========

    Security is a primary focus of Gentoo Linux and ensuring the
    confidentiality and security of our users' machines is of utmost
    importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

    License
    =======

    Copyright 2025 Gentoo Foundation, Inc; referenced text
    belongs to its owner(s).

    The contents of this document are licensed under the
    Creative Commons - Attribution / Share Alike license.

    https://creativecommons.org/licenses/by-sa/2.5
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmhKgv8ACgkQFMQkOaVy +9mFGQ/9E0bgSLaKRLa14JQOjkOckS5C1A4kFdu6Y7v2A8FOHq6heiNRnC8tBVyZ pNerwpY038fH1+RNpN2B7eD8U6AVCACpF9RRqlmiNZTwjFsuSpm1mQFvLojzTdRV AO5qXBChGuh27wiVPmOij5UcEDRLWIZlv28INKbOjWZ3DFjFXeXlWpgVN9lis3Bk eSCP6gJ+VFIzv7SkpEOs8rCxkyFIfHy+C/pe2GbE+Oud2irirKpa41qAyc7eGET9 EZNSr1KliEnkqW5ztSMv22jrXYCoplcuKINBs/w97YGue5pdNWVa9mTAs2vCQ4lg qzoxFz2KIDU+QQG2Pb4EDalM81xSpztF7LhbhAhXJjPqE13OF/TJXFirlfmawy2D rRx/b7DIk1bod7vS73L8K3gST/Nni4p4YLrF2Np6xYaE8vT2/ZBqVE+BhlIiytW1 9PpLcF2ikFujc7Bpzsl87Dn+XrHT9i21P7q0C2llKxbJoOVp9rOPBxmzYhkohllc Jx2hrcm/tl1AjPKc3Twc1s9/MpXBi/jnJVGMCbLx1fvoOlR3ThuEL4kc7dVnMXE7 fNOja+qcfVUAi0I8KL88LKX6xsa1bnyGmAvplFZorOYiLyKCa/nTvfnjdBoEPQEe 4Ulqrl2j6LTbpA7R6nux1aFuElOJsCoO3aAhpwy2+J/IxgeLTG0=
    =aSzf
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)